← Back to z/OS ROSCOE for ACF2 Security Technical Implementation Guide

V-224340

CAT II (Medium)

The ROSCOE's Resource Class is not defined or active in the ACP.

Rule ID

SV-224340r1141634_rule

STIG

z/OS ROSCOE for ACF2 Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-000336 CCI-002358

Discussion

Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data.

Check Content

Refer to the following report produced by the ACF2 Data Collection:

- ACF2CMDS.RPT(ACFGSO).

If the following GSO CLASMAP record entry(ies) is (are) defined, this is not a finding.

CLASMAPqual RESOURCE(ROSRES) RSRCTYPE(rosid) ENTITYLN(nn)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.

Fix Text

Use SAF security to define and protect the Products resource class(es).

Ensure that the following GSO CLASMAP record entry(ies) is (are) defined:

CLASMAP.ROSCOE ENTITYLN(nn) RESOURCE(ROSRES) 
RSRCTYPE(rosid)

Note: The site determines the appropriate three letter RSRCTYPE that is unique for each Roscoe system. The ENTITYLN should be appropriate for the site's installation.

Example:

SET C(GSO)
LIST CLASMAP.ROSCOE
INSERT CLASMAP.ROSCOE ENTITYLN(39) RESOURCE(ROSRES) RSRCTYPE(ROS)

F ACF2,REFRESH(CLASMAP)